AMENDMENTS 

In the Claims 

The following is a marked-up version of the claims with the language that is underlined 
(" ") being added and the language that contains strikethrough (" — ") being deleted: 

1.-20. (Canceled) 

21 . (Currently Amended) A computer-readable medium comprising: 

computer-readable code adapted to instruct a programmable device to search for a first 
piece of sensitive information, the first piece of sensitive information including personal 
information regarding at least one user; 

computer-readable code adapted to instruct a programmable device to search for a 
second piece of sensitive information, the second piece of sensitive information including 
personal information regarding the at least one user; 

computer-readable code adapted to instruct a programmable device to obtain a result of 
the search for the first piece of sensitive i nformat i on; information, the first piece of sensitive 
information being of a first type: 

computer-readable code adapted to instruct a programmable device to obtain a result of 
the search for the second piece of sensitive i nformat i on; information, the second piece of 
sensitive information being of a second type, the first type of information being different than the 
second type of information; 

computer-readable code adapted to instruct a programmable device to assign a first 
score, the first score being determined from the number of occurrences of the first piece of 
sensitive data, as revealed in the search for the first piece of sensitive data; 

computer-readable code adapted to instruct a programmable device to assign a second 
score, the second score being determined from the number of occurrences of the first piece of 
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sensitive data, as revealed in ttie searcti for ttie first piece of sensitive data; 

computer-readable code adapted to instruct a programmable device to combine the first 
score and the second score; 

computer-readable code adapted to instruct a programmable device to provide the 
combined score to a user; and 

computer-readable code adapted to instruct a programmable device to determine, from 
the combined score, a risk for at least one identity-related vulnerability. 

22. (Previously Presented) The computer-readable medium of claim 21 , wherein 
sensitive information includes at least one of the following: a name, an address, a social 
security number, a telephone number, and an email address. 

23. (Currently Amended) The computer-readable medium of claim 21 , wherein 

determining the risk for at least one identity-related vulnerability includes determining a 
magn i tude of r i sk likelihood for identity theft, theft and classifying the likelihood as a level of risk. 

24. (Currently Amended) The computer-readable medium of claim 21 , wherein 
determining the fisk likelihood for at least one identity-related vulnerability includes determining 
a magnitude of risk for a privacy breach. 

25. (Currently Amended) The computer-readable medium of claim 21 , wherein 
determining the risk for at least one identity-related vulnerability includes determining a 
magn i tude of r i sk for likelihood of receiving spam, spam and classifying the likelihood as a level 
of risk. 

26. (Previously Presented) The computer-readable medium of claim 21 , wherein the 
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computer-readable code adapted to instruct a programmable device to search for the first piece 
of sensitive information is configured to search one or more web pages. 

27. (Previously Presented) The computer-readable medium of claim 21, wherein the 
computer-readable code adapted to instruct a programmable device to search for the second 
piece of sensitive information is configured to search one or more web pages. 

28. (Currently Amended) A method comprising: 

searching for a first piece of sensitive information, the first piece of sensitive information 
including personal information regarding at least one user; 

searching for a second piece of sensitive information, the second piece of sensitive 
information including personal information regarding the at least one user; 

obtaining a result of the search for the first piece of sensitive i nformat i on; information, 
the first piece of sensitive information being of a first type; 

obtaining a result of the search for the second piece of sensitive i nformat i on; 
information, the second piece of sensitive information being of a second type, the first type of 
information being different than the second type of information; 

assigning a first score, the first score being determined from the number of occurrences 
of the first piece of sensitive data, as revealed in the search for the first piece of sensitive data; 

assigning a second score, the second score being determined from the number of 
occurrences of the second piece of sensitive data, as revealed in the search for the second 
piece of sensitive data; 

comb i n i ng combining, by an electronic device, the first score and the second score; 

prov i d i ng providing, by the electronic device, the combined score to a user; and 

determining, from the combined score, a risk for at least one identity-related 
vulnerability. 
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29. (Previously Presented) The method of claim 28, wherein sensitive information 
includes at least one of the following: a name, an address, a social security number, a 
telephone number, and an email address. 

30. (Currently Amended) The method of claim 28, wherein determining the risk for at 
least one identity-related vulnerability includes determining a magnitude of r i sk for likelihood of 
identity tl=>eft7 theft and classifying the likelihood as a level of risk. 

31 . (Currently Amended) The method of claim 28, wherein determining the risk for at 
least one identity-related vulnerability includes determining a magn i tude of r i sk for likelihood of a 
privacy broach, breach and classifying the likelihood as a level of risk. 

32. (Previously Presented) The method of claim 28, wherein determining the risk for 
at least one identity-related vulnerability includes determining a magnitude of risk for receiving 
spam. 

33. (Currently Amended) The method of claim 28, wherein searching for the first 
piece of sensitive information includes searching one or more web pagos. pages, and wherein 
searching for the second piece of sensitive information includes searching one or more web 
pages. 

34. (Canceled) 

35. (Currently Amended) A system comprising: 

a first searching component configured to search for a first piece of sensitive 
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information, the first piece of sensitive information including personal information regarding at 
least one user; 

a second searching component configured to search for a second piece of sensitive 
information, the second piece of sensitive information including personal information regarding 
the at least one user; 

a first obtaining component configured to obtain a result of the search for the first piece 
of sensitive i nformation; information, the first piece of sensitive information being of a first type; 

a second obtaining component configured to obtain a result of the search for the second 
piece of sensitive i nformat i on; information, the second piece of sensitive information being of a 
second type, the first type of information being different than the second type of information: 

a first assigning component configured to assign a first score, the first score being 
determined from the number of occurrences of the first piece of sensitive data, as revealed in 
the search for the first piece of sensitive data; 

a second assigning component configured to assign a score, the second score being 
determined from the number of occurrences of the second piece of sensitive data, as revealed 
in the search for the second piece of sensitive data; 

a combining component configured to combine the first score and the second score; 

a providing component configured to provide the combined score to a user; and 

a determining component configured to determine, from the combined score, a risk for at 
least one identity-related vulnerability. 

36. (Previously Presented) The system of claim 34, wherein sensitive information 
includes at least one of the following: a name, an address, a social security number, a 
telephone number, and an email address. 

37. (Currently Amended) The system of claim 34, wherein determining the risk for at 
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least one identity-related vulnerability includes determining a maqn i tudo of r i sk for likelihood of 
identity theft, theft and classifying the likelihood as a level of risk. 

38. (Currently Amended) The system of claim 34, wherein determining the risk for at 
least one identity-related vulnerability includes determining a maqn i tudo of r i sk for likelihood of a 
privacy broach, breach and classifying the likelihood as a level of risk. 

39. (Currently Amended) The system of claim 34, wherein determining the risk for at 
least one identity-related vulnerability includes determining a magn i tudo of r i sk for likelihood of 
receiving spam, spam and classifying the likelihood as a level of risk. 

40. (Previously Presented) The system of claim 34, wherein searching for sensitive 
information includes searching one or more web pages. 

41 . (New) The method of claim 28, wherein the electronic device includes a personal 
computer. 
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